USN-4663-1: GDK-PixBuf vulnerability
8 December 2020
GDK-PixBuf could be made to hang if it opened a specially crafted file.
Releases
Packages
- gdk-pixbuf - GDK Pixbuf library
Details
Melvin Kool discovered that the GDK-PixBuf library did not properly handle
certain GIF images. If an user or automated system were tricked into
opening a specially crafted GIF file, a remote attacker could use this flaw
to cause GDK-PixBuf to hang, resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.10
Ubuntu 20.04
After a standard system update you need to restart your session to make all
the necessary changes.